tscircuit@0.0.3003
⚠ Under reviewMake electronics using Typescript, React, and AI tools. Just prompt your agent to "use tscircuit" and 10x its PCB capabilities!
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe inspected package entrypoints delegate core functionality and CLI execution to dependencies whose source was unresolved in the available snapshot. No concrete malicious behavior was found in the source that could be inspected, so the unresolved runtime coverage requires manual review.
Decision evidence
public snapshot- The manifest declares @tscircuit/cli as a runtime dependency.
- The manifest declares @tscircuit/core and @tscircuit/eval as runtime dependencies.
- The main module re-exports @tscircuit/core and @tscircuit/eval.
- Running the CLI entrypoint imports @tscircuit/cli.
- The inspected @tscircuit/props package contains schema definitions and no install lifecycle scripts.
- The inspected React entrypoint selects its production or development bundle based on NODE_ENV.
Source & flagged code
6 flaggedPackage contains source files above the normal full-analysis size ceiling.
dist/webworker.min.jsView on unpkgThe manifest declares @tscircuit/cli as a runtime dependency.
package.jsonView on unpkg · L58Findings
Affected versions and remediation
This report applies to tscircuit@0.0.3003.
See all versions of tscircuit for other recorded verdicts.
- Review the evidence and your use of tscircuit@0.0.3003 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.